JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

38.242.216.201

Neutral Activity

Abuse confidence score ?

0% Low Risk

49 reports

36 reporters · latest 10 months ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2979713.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

38.242.216.201 has been reported 49 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 38.242.216.201

This IP address has been reported a total of 49 times from 36 distinct sources. 38.242.216.201 was first reported on February 17th 2022, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 exxos	2025-11-03 10:31:03 (10 months ago)	Attacks with Bad user agents	Hacking
🇳🇱 exxos	2025-11-03 10:23:34 (10 months ago)	Attacks with Bad user agents	Hacking
🇩🇪 invalidLuca	2022-03-15 13:30:41 (4 years ago)	[UFW] Unauthorized connection attempt from 38.242.216.201	Port Scan
🇹🇼 kk_it_man	2022-03-09 14:23:08 (4 years ago)	ET SCAN Sipvicious Scan ET SCAN Sipvicious User-Agent Detected (friendly-scanner)	Port Scan
🇮🇩 NOC Monitoring KAI	2022-03-09 11:10:04 (4 years ago)	SOC mendeteksi adanya suspicious activity berupa scanning dengan signature "SIPVicious Scanner Detec ... show more SOC mendeteksi adanya suspicious activity berupa scanning dengan signature "SIPVicious Scanner Detection(54482)" mengarah ke beberapa IP Internal KAI dari arah External IP 38.242.216.201. SIPVicious digunakan untuk scanning phone system atau SIP devices. Salah satu serangan yang dapat dijalankan pada SIP diantaranya DDOS VoIP Server, mengidentifikasi live extension pada PBX (Private Branch Exchange) dengan brute force, SIP Devices, softphones dan hardphones pada jaringan. PBX ditargetkan karena attacker dapat membuat panggilan menggunakan data dengan biaya dari victim. show less	DDoS Attack Fraud VoIP Port Scan Brute-Force
🇯🇵 stfw	2022-03-09 10:42:58 (4 years ago)	5061/udp 7300/udp 5060/udp... [2022-02-18/03-09]6pkt,3pt.(udp)	Port Scan
🇫🇷 vincent_EUDIER	2022-03-08 10:20:00 (4 years ago)	ET SCAN Sipvicious Scan	Port Scan
🇫🇷 QUADEMU Abuse Dpt	2022-03-08 09:53:29 (4 years ago)	Noxious/Nuisible/вредоносный Host.	Port Scan Brute-Force
🇫🇷 security.rdmc.fr	2022-03-08 09:39:22 (4 years ago)	Automatic report - Banned IP Access	Web App Attack
🇩🇪 lewisakura	2022-03-07 06:30:50 (4 years ago)	[Mar 7 11:30:49] NOTICE[1370][C-00004f96] chan_sip.c: Call from '' (38.242.216.201:5102) to extensio ... show more [Mar 7 11:30:49] NOTICE[1370][C-00004f96] chan_sip.c: Call from '' (38.242.216.201:5102) to extension '4079301737' rejected because extension not found in context 'public'. [Mar 7 11:30:49] NOTICE[1370][C-00004f97] chan_sip.c: Call from '' (38.242.216.201:5102) to extension '0' rejected because extension not found in context 'public'. [Mar 7 11:30:49] NOTICE[1370][C-00004f98] chan_sip.c: Call from '' (38.242.216.201:5102) to extension '1' rejected because extension not found in context 'public'. [Mar 7 11:30:50] NOTICE[1370][C-00004f9b] chan_sip.c: Call from '' (38.242.216.201:5102) to extension '4' rejected because extension not found in context 'public'. [Mar 7 11:30:50] NOTICE[1370][C-00004f9c] chan_sip.c: Call from '' (38.242.216.201:5102) to extension '5' rejected because extension not found in context 'public'. [Mar 7 11:30:50] NOTICE[1370][C-00004f9d] chan_sip.c: Call from '' (38.242.216.201:5102) to extension '6' rejected because extension not found in context 'public'. [Mar 7 11:30:50] NOTICE[1370][C show less	Fraud VoIP Brute-Force
🇫🇮 sgofferj	2022-03-06 22:27:54 (4 years ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇩🇪 DiLenaTech	2022-03-01 20:44:22 (4 years ago)	2022-03-02 02:44:20,971 fail2ban.actions [1096]: NOTICE [asterisk-challenge] Ban 38.242.216. ... show more 2022-03-02 02:44:20,971 fail2ban.actions [1096]: NOTICE [asterisk-challenge] Ban 38.242.216.201 ... show less	Brute-Force SSH
🇷🇸 Smel	2022-02-22 19:36:01 (4 years ago)	SIP/5060 Probe, BF, Hack -	Fraud VoIP Hacking Brute-Force
🇩🇪 OiledAmoeba	2022-02-21 18:46:46 (4 years ago)	Feb 18 15:10:50 fhem-rasp kernel: nft.input_drop IN=eth0 OUT= MAC=dc:a6:32:3f:6d:59:c8:0e:14:ae:34:1 ... show more Feb 18 15:10:50 fhem-rasp kernel: nft.input_drop IN=eth0 OUT= MAC=dc:a6:32:3f:6d:59:c8:0e:14:ae:34:10:08:00 SRC=38.242.216.201 DST=10.23.102.44 LEN=442 TOS=0x00 PREC=0x00 TTL=55 ID=13882 DF PROTO=UDP SPT=5209 DPT=5060 LEN=422 Feb 22 00:46:46 fhem-rasp kernel: nft.input_drop IN=eth0 OUT= MAC=dc:a6:32:3f:6d:59:c8:0e:14:ae:34:10:08:00 SRC=38.242.216.201 DST=10.23.102.44 LEN=443 TOS=0x00 PREC=0x00 TTL=55 ID=24371 DF PROTO=UDP SPT=5461 DPT=5061 LEN=423 Feb 22 00:46:46 fhem-rasp kernel: nft.input_drop IN=eth0 OUT= MAC=dc:a6:32:3f:6d:59:c8:0e:14:ae:34:10:08:00 SRC=38.242.216.201 DST=10.23.102.44 LEN=443 TOS=0x00 PREC=0x00 TTL=55 ID=24372 DF PROTO=UDP SPT=5461 DPT=7300 LEN=423 ... show less	Brute-Force
🇯🇵 stfw	2022-02-21 18:39:34 (4 years ago)	5061/udp 7300/udp 5060/udp... [2022-02-18/21]5pkt,3pt.(udp)	Port Scan

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.207.159.10

🇩🇪 178.105.200.202

🇪🇨 157.100.189.235

🇦🇷 129.224.215.44

🇨🇳 123.245.85.34

🇻🇳 103.48.192.48

🇷🇺 77.66.185.168

🇦🇷 45.181.247.23

🇺🇸 32.197.78.151

🇺🇸 20.14.76.20

🇵🇦 181.197.28.196

🇧🇷 179.184.85.167

🇳🇱 91.92.42.221

🇺🇸 66.132.186.248

🇨🇳 60.25.55.203

🇦🇷 45.234.182.238

🇻🇳 45.121.25.115

🇷🇺 31.13.19.104

🇺🇸 13.89.125.230

🇨🇳 1.197.103.13